Title: REST API Route Tester Author: Nowshad Jawad Published: May 29, 2025 Last modified: March 20, 2026 --- Search plugins ![](https://ps.w.org/rest-api-route-tester/assets/banner-772*250.png?rev=3302611) ![](https://ps.w.org/rest-api-route-tester/assets/icon-256*256.png?rev=3302611) # REST API Route Tester By [Nowshad Jawad](https://profiles.wordpress.org/jawad0501/) [Download](https://downloads.wordpress.org/plugin/rest-api-route-tester.1.4.0.zip) * [Details](https://frp.wordpress.org/plugins/rest-api-route-tester/#description) * [Reviews](https://frp.wordpress.org/plugins/rest-api-route-tester/#reviews) * [Installation](https://frp.wordpress.org/plugins/rest-api-route-tester/#installation) * [Development](https://frp.wordpress.org/plugins/rest-api-route-tester/#developers) [Support](https://wordpress.org/support/plugin/rest-api-route-tester/) ## Description REST API Route Tester is a powerful tool for WordPress developers and administrators to test and debug REST API endpoints. It provides a user-friendly interface to: * View all registered REST API routes * Test routes with different HTTP methods (GET, POST, PUT, PATCH, DELETE, OPTIONS, HEAD) * Switch between different user roles to test permissions * Send custom headers and body data * View detailed responses including status codes and timing ## Screenshots * [[ * [[ * [[ * [[ ## Installation 1. Upload the plugin files to the `/wp-content/plugins/rest-api-route-tester` directory, or install the plugin through the WordPress plugins screen directly. 2. Activate the plugin through the ‘Plugins’ screen in WordPress 3. Use the Tools->REST Route Tester screen to use the plugin ## FAQ ### What permissions do I need to use this plugin? You need to have the ‘manage_options’ capability to use this plugin, which is typically granted to administrators. ### Can I test authenticated endpoints? Yes, you can test authenticated endpoints by selecting different user roles from the dropdown menu. ### How do I report bugs and request features? Please open a topic in our WordPress.org support forum with: * WordPress version and PHP version * Route and HTTP method * Headers/body sample (remove secrets) * Expected result vs actual result Support forum: https://wordpress.org/support/plugin/rest-api-route-tester/ ## Reviews There are no reviews for this plugin. ## Contributors & Developers “REST API Route Tester” is open source software. The following people have contributed to this plugin. Contributors * [ Nowshad Jawad ](https://profiles.wordpress.org/jawad0501/) [Translate “REST API Route Tester” into your language.](https://translate.wordpress.org/projects/wp-plugins/rest-api-route-tester) ### Interested in development? [Browse the code](https://plugins.trac.wordpress.org/browser/rest-api-route-tester/), check out the [SVN repository](https://plugins.svn.wordpress.org/rest-api-route-tester/), or subscribe to the [development log](https://plugins.trac.wordpress.org/log/rest-api-route-tester/) by [RSS](https://plugins.trac.wordpress.org/log/rest-api-route-tester/?limit=100&mode=stop_on_copy&format=rss). ## Changelog #### 1.4.0 * Added URL parameter inputs for routes containing tokens such as `{id}` * Param values are URL-encoded, substituted at send time, and persisted in localStorage * Added “Copy as cURL” button with method, resolved URL, headers, and body * Fixed resolved-route validation against regex-based WordPress route patterns * Fixed route display formatting for complex regex-style parameters (named captures now render as clean `{param}` tokens) * Added `rest_url` in `wprrt_vars` for more accurate generated cURL commands * Added JS modules: `src/params.js` and `src/export.js` #### 1.3.0 * Added Saved Requests sidebar — save any request by name, click to restore into active tab * Added auth preset dropdown (No Auth, Bearer Token, API Key, Basic Auth) — auto- fills Headers field * Saved requests persisted per-user in wp_usermeta (max 100, newest first) * New PHP class WPRRT_Saved_Requests with save, get_all, delete methods * New AJAX actions: wprrt_save_request, wprrt_get_saved_requests, wprrt_delete_request * Auth type selection persisted in localStorage tab state * Two-column layout: sidebar left, request/response right #### 1.2.0 * Introduced Vite build system — source now lives in src/ and compiles to assets/ app.js * Modular JS architecture: state.js, tabs.js, request.js, response.js, main.js * Added PrismJS syntax highlighting for JSON responses (GitHub-flavoured light theme) * Build commands: npm run build (production), npm run dev (watch mode) * Fixed: empty request body was rejected with “Invalid JSON data” — empty string now correctly defaults to {} #### 1.1.0 * Security: Fixed XSS vulnerability in route dropdown — route names now inserted via textContent, never innerHTML * Security: test_route() now wrapped in try/finally so temporary test users are always deleted * Security: Added 512 KB payload size limit on request body * Security: Added route existence validation — unknown routes are rejected before execution * Added support for PATCH, OPTIONS, and HEAD HTTP methods * Response now returns HTTP status code and response headers alongside body data * Response panel now shows a color-coded status badge (2xx green, 3xx blue, 4xx yellow, 5xx red) * Response time displayed as a readable line above the body, not embedded in JSON * Added collapsible Response Headers section in the response panel * Fixed formatRoute() regex to correctly handle optional parameter groups * AJAX failures now show a visible inline error message instead of a silent blank state * Removed all debug console.log() calls from production JS * Removed permanently-hidden dead “Form Params” field * JS globals wrapped in WPRRT namespace object to avoid conflicts #### 1.0.0 * Initial release ## Meta * Version **1.4.0** * Last updated **1 month ago** * Active installations **40+** * WordPress version ** 5.0 or higher ** * Tested up to **6.9.4** * PHP version ** 8.0 or higher ** * Language * [English (US)](https://wordpress.org/plugins/rest-api-route-tester/) * Tags * [api](https://frp.wordpress.org/plugins/tags/api/)[developer-tools](https://frp.wordpress.org/plugins/tags/developer-tools/) [rest-api](https://frp.wordpress.org/plugins/tags/rest-api/)[testing](https://frp.wordpress.org/plugins/tags/testing/) * [Advanced View](https://frp.wordpress.org/plugins/rest-api-route-tester/advanced/) ## Ratings No reviews have been submitted yet. [Your review](https://wordpress.org/support/plugin/rest-api-route-tester/reviews/#new-post) [See all reviews](https://wordpress.org/support/plugin/rest-api-route-tester/reviews/) ## Contributors * [ Nowshad Jawad ](https://profiles.wordpress.org/jawad0501/) ## Support Got something to say? Need help? [View support forum](https://wordpress.org/support/plugin/rest-api-route-tester/)